CVE-2022-3663

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3663
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3663.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3663
Downstream
Published
2022-10-26T00:00:00Z
Modified
2026-07-15T01:49:19.946628971Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference
Details

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212003.

Database specific 
{
    "cwe_ids": [
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3663.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/axiomatic-systems/bento4

Affected ranges

Type
GIT
Repo
https://github.com/axiomatic-systems/bento4
Events
Introduced
83c48e6e2a3f8e4be7ad2eddaa0639303184146d
Last affected
83c48e6e2a3f8e4be7ad2eddaa0639303184146d
Database specific 
{
    "cpe": "cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.6.0-639"
        },
        {
            "last_affected": "1.6.0-639"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.6.0-639
v1.*
v1.6.0-639

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3663.json"